37 matches found
UBUNTU-CVE-2022-20128
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2024-20128
creationtimestamp| type| source ---|---|--- 2024-12-02 03:25:22+00:00| seen| https://infosec.exchange/users/cve/statuses/113581091833552890 2024-12-02 03:28:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113581105827394955 2024-12-02 06:12:35+00:00| seen| https://t.me/cvedetector/117...
Fedora 37 : android-tools (2022-6716cd0da2)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-6716cd0da2 advisory. Update to 33.0.3p1 Security fix for CVE-2022-20128 CVE-2022-3168 Tenable has extracted the preceding description block directly from the Fedora...
CVE-2023-20128
creationtimestamp| type| source ---|---|--- 2023-04-07 12:30:05+00:00| seen| https://t.me/truesecator/4264...
Fedora: Security Advisory for android-tools (FEDORA-2022-7f14b7d45e)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for android-tools (FEDORA-2022-9a9a638d09)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2017-20128
A vulnerability has been found in KB Messages PHP Script 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. The attack can be launched remotely. The exploit h...
CVE-2017-20128 KB Messages PHP Script sql injection
A vulnerability has been found in KB Messages PHP Script 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. The attack can be launched remotely. The exploit h...
CVE-2017-20128
KB Messages PHP Script 1.0 is affected by an unauthenticated SQL injection vulnerability. The issue arises from improper handling of the username/password inputs, where the payload 'or''=' enables injection. It is exploitable remotely and the exploit has been publicly disclosed, making active exp...
CVE-2021-20128
creationtimestamp| type| source ---|---|--- 2021-10-13 20:26:53+00:00| seen| https://t.me/cibsecurity/30524...
CVE-2021-20128
The Profile Name field in the floor plan Network Menu page in Draytek VigorConnect 1.6.0-B3 was found to be vulnerable to stored XSS, as user input is not properly sanitized...
CVE-2021-20128
The CVE-2021-20128 vulnerability affects DrayTek VigorConnect 1.6.0-B3, specifically the Profile Name field in the floor plan (Network Menu) page. It is a stored XSS flaw caused by improper sanitization of user input in that field. The exploit would rely on injecting malicious script via the Prof...
CVE-2020-20128
creationtimestamp| type| source ---|---|--- 2021-09-30 02:37:15+00:00| seen| https://t.me/cibsecurity/29692...
CVE-2020-20128
Summary: CVE-2020-20128 affects LaraCMS v1.0.1, where sensitive information is transmitted in cleartext, potentially allowing interception. The entry lists CVSS v3.1 BaseScore 7.5 (High) and CVSS2 BaseScore 5.0 (Medium) with network attack vector and low complexity. Multiple connected sources des...
CVE-2018-20128
UsualToolCMS v8.0 (UTCMS) contains a vulnerability in cmsadmin\a_sqlback.php where a backname[] directory-traversal pathname can be crafted to delete arbitrary files. Remote attackers could exploit this to delete arbitrary files on the affected system. The root cause is a directory-traversal in t...
